Stefano Mattio is a lawyer who provides specialist advisory and legal assistance, also in his capacity as a lecturer and trainer, in the fields of data protection, corporate liability under Legislative Decree No. 231/2001, transparency and access to information, supporting public and private entities in their governance and regulatory compliance processes.

His professional practice focuses on the application of data protection law, including the processing of personal data for the purposes of the prevention, investigation, detection and prosecution of criminal offences (law enforcement). His expertise encompasses, in particular, acting as a Data Protection Officer (DPO) or as a member of a DPO team, the development of organisational and governance frameworks, risk management activities, the preparation of Legitimate Interest Assessments (LIAs) and Data Protection Impact Assessments (DPIAs), data breach management, and liaison with supervisory authorities.

He also provides specialist advice on the administrative liability of legal entities pursuant to Italian Legislative Decree No. 231/2001, particularly in connection with serving as a member of a Supervisory Body (Organismo di Vigilanza – OdV) or providing support to its activities. His practice further includes the drafting and updating of Organisation, Management and Control Models, with a view to fostering the effective integration of corporate compliance systems with broader governance frameworks and safeguards.

He has acquired significant experience in the fields of administrative transparency and access to information, with a particular focus on access to administrative documents, civic access and generalised civic access (FOIA). He advises on the development of regulations, procedures and operational frameworks for managing access and document disclosure requests, including by identifying the appropriate balance between transparency requirements, confidentiality safeguards and the protection of personal data.